Security

Last Updated November 1, 2017

Turn’s dedicated team of support staff and engineers are committed to providing you with the best experience possible. We do our best to respond to any customer service or technical support issues quickly, efficiently, and with care.

How Turn protects your information

Turn uses state of the art security tools and practices to protect you and guard against unauthorized use of and access to your personal or financial information. If you suspect that there has been unauthorized activity on your account, please contact us immediately at support@turning.io.

Encryption & Storage

We ruthlessly automate, with a focus on infrastructure as code, security as part of the build process, and rigorous, continuous monitoring. Your PII information is encrypted at rest with AES 256 bit encryption, and in transit to our web and platforms via HTTPS. On the web we use extended validation certificates to prove the authenticity of our web services and to prevent man-in-the-middle attacks. The ‘green bar’ in your web browser is the indication of this certificate. We use strong cryptography with 256-bit keys and practice consistent key rotation.

Once access to consumer PII has been granted, it is not immediately available to the Turn partner. Turn employs an additional level of verification and auditing when the specific PII details (SSN, phone number, email, driver’s license number) are specifically requested. This minimizes the chances for identity theft through screen scraping, hidden photography, casual observation etc.

Responsible Disclosure and Reporting Vulnerabilities

Security vulnerabilities are an unfortunate but common issue in software development. At Turn we take them very seriously. If you are a security researcher and have found a potential security vulnerability in our systems, please send details to security@turning.io.
We appreciate your help in notifying us of vulnerabilities in a responsible manner.

Please note that support inquiries about your Turn account sent to this address will be ignored. If you have a question or concern regarding your account, you should contact customer support at support@turning.io.